[Webkit-unassigned] [Bug 19455] Safari crashes due to sequence of editing commands

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=19455





------- Comment #2 from eric at webkit.org  2008-06-09 23:46 PDT -------
Created an attachment (id=21601)
 --> (http://bugs.webkit.org/attachment.cgi?id=21601&action=view)
test case (crashes Safari)

The sequence of crashing commands is:

  doc.designMode = 'on';
  doc.execCommand('inserthorizontalrule', 0, 'data:text/html,<h1>hello</h1>');
  doc.execCommand('insertparagraph', 1, 'data:text/html,<h1>hello</h1>');
  doc.execCommand('delete', 0, '<iframe src=about:blank>');
  doc.execCommand('inserthorizontalrule', 1, '</td>');
  doc.execCommand('justifycenter', 0, '<pre>');
  doc.execCommand('formatblock', 0, '<pre>');
  doc.execCommand('inserthorizontalrule', 0, 'courier');
  doc.execCommand('insertparagraph', 0, '<pre>');
  doc.execCommand('selectall', 0, '<iframe src=about:blank>');
  doc.execCommand('createLink', 1, '<td>');
  doc.execCommand('selectall', 1, '<table>');
  doc.execCommand('justifycenter', 1, '');


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.